Tenant

The current tenant and its settings.

📄️Get the current tenant

Get the current tenant

📄️Update the current tenant

Admin-only. Updates the tenant profile and settings.

📄️The feature catalogue + disabled set (admin only)

The 'Disable features' surface: every optional feature with its group and dependencies, plus the tenant's current raw disabled set. Admin-only (`features.manage`).

📄️Replace the tenant's disabled feature set (admin only)

Sets which optional features are disabled for the whole tenant. Unknown keys are dropped; cascade (a child disabled because its parent is) is derived, not stored. Admin-only (`features.manage`).

📄️The current pending ownership transfer (owner only)

Returns the pending transfer (target summary, expiry, attempts left) or null. OWNER-ONLY — a non-owner admin gets 403.

📄️Start an ownership transfer to a member (owner only)

OWNER-ONLY. Validates the target (active member of this tenant, verified account email, not the owner) and that the owner's own account email is verified, then emails a 6-digit confirmation code to the OWNER and returns the pending transfer. The code is NEVER returned.

📄️Cancel the pending ownership transfer (owner only)

Cancel the pending ownership transfer (owner only)

📄️Confirm the pending transfer with the emailed code (owner only)

OWNER-ONLY and rate-limited. Confirms with the 6-digit code emailed to the owner. On success ownership moves to the target (target becomes admin+owner; the old owner stays admin). Wrong code → 422 invalid_code (attempts counted); after 5 wrong → 422 too_many_attempts; expired → 422 expired.